Overview

overview

10

Static

static

8

667d35d2cf...87.exe

windows7_x64

10

667d35d2cf...87.exe

windows10_x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target
    667d35d2cff2979ca84df0afe1eca6c164e1d919b989e16b97166c7a30c77a87
  • Size 590KB
  • Sample200624-8te24sp4k6
  • SHA256 667d35d2cff2979ca84df0afe1eca6c164e1d919b989e16b97166c7a30c77a87
  • MD5 SHA1 SHA512
Score
10/10
remcosrat

Malware Config

Extracted

Family

  • remcos

C2

  • abujafirms.com:2244

  • yokiri.com:2244

Targets

    • Target
      667d35d2cff2979ca84df0afe1eca6c164e1d919b989e16b97166c7a30c77a87
    • Size 590KB
    • SHA256 667d35d2cff2979ca84df0afe1eca6c164e1d919b989e16b97166c7a30c77a87
    • MD5 SHA1 SHA512
    Score
    10/10
    ratremcos

    • Remcos

      Remcos is a closed-source remote control and surveillance software.

      ratremcos

    • Executes dropped EXE

    • Drops startup file

    • Loads dropped DLL

    • Suspicious use of SetThreadContext

    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks